uudecode alias security hole?

[Tom Christiansen]

I seem to recall that there's a security hole involved with
make an alias of "decode" in /usr/lib/aliases to go to 
"|/usr/bin/uudecode", but I don't recall how it runs.  If
anyone knows the problem (if one exists), could you please
fill me in?

thanks,

--tom